{"uuid": "7b86be80-92c4-4e92-ae0e-ded4d20c659b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0994", "type": "exploited", "source": "https://t.me/crackvaultde/1074", "content": "Trimble Cityworks Zero-Day Exploitation by Chinese Threat Actors\n\nChinese threat group UAT-6382 exploited a deserialization vulnerability (CVE-2025-0994) in Cityworks to deploy web shells and backdoors. Municipal systems in the U.S. were targeted, enabling long-term access to critical utility and asset management data.\n\nFor Details:\nTG Channel: @crackvaultde\nTG Group: @crack_vault_group\nWebsite: crackvault.de", "creation_timestamp": "2026-07-22T00:00:33.845677Z"}